{"id":"https://openalex.org/W7163154635","doi":"https://doi.org/10.1109/icaiset66439.2026.11541828","title":"Honeytoken and Honeypot Systems for IoT Networks: Proof of Concept and Implementation using ESP32-S3","display_name":"Honeytoken and Honeypot Systems for IoT Networks: Proof of Concept and Implementation using ESP32-S3","publication_year":2026,"publication_date":"2026-04-21","ids":{"openalex":"https://openalex.org/W7163154635","doi":"https://doi.org/10.1109/icaiset66439.2026.11541828"},"language":"en","primary_location":{"id":"doi:10.1109/icaiset66439.2026.11541828","doi":"https://doi.org/10.1109/icaiset66439.2026.11541828","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icaiset66439.2026.11541828","pdf_url":null,"source":{"id":"https://openalex.org/S7407096233","display_name":"International Conference on Artificial Intelligence, Systems, and Emerging Technologies (ICAISET)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Conference on Artificial Intelligence, Systems, and Emerging Technologies (ICAISET)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003480337","display_name":"Nabil Litayem","orcid":"https://orcid.org/0000-0001-7285-9998","observed_orcids":["https://orcid.org/0000-0001-7285-9998"]},"institutions":[{"id":"https://openalex.org/I4405262428","display_name":"Joaan Bin Jassim Academy for Defence Studies","ror":"https://ror.org/037nzbf45","country_code":"QA","type":"education","lineage":["https://openalex.org/I4405262428"]}],"countries":["QA"],"is_corresponding":true,"raw_author_name":"Nabil Litayem","raw_affiliation_strings":["Joaan Bin Jassim Academy for Defence Studies,Department of Cyber Defence,Doha,Qatar"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Joaan Bin Jassim Academy for Defence Studies,Department of Cyber Defence,Doha,Qatar","institution_ids":["https://openalex.org/I4405262428"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5003480337"],"corresponding_institution_ids":["https://openalex.org/I4405262428"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.26659751,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9848999977111816,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9848999977111816,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.00559999980032444,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/honeytokens","display_name":"honeytokens","score":0.9539999961853027},{"id":"https://openalex.org/keywords/honeypots","display_name":"honeypots","score":0.8849999904632568},{"id":"https://openalex.org/keywords/iot-security","display_name":"Internet of Things security","score":0.9340000152587891},{"id":"https://openalex.org/keywords/deception","display_name":"deception","score":0.44999998807907104},{"id":"https://openalex.org/keywords/edge-devices","display_name":"edge devices","score":0.5239999890327454},{"id":"https://openalex.org/keywords/esp32-s3","display_name":"ESP32-S3","score":0.9070000052452087},{"id":"https://openalex.org/keywords/resource-constrained-devices","display_name":"resource-constrained devices","score":0.7310000061988831},{"id":"https://openalex.org/keywords/unauthorized-access-detection","display_name":"unauthorized access detection","score":0.847000002861023},{"id":"https://openalex.org/keywords/mitre-att-ck","display_name":"MITRE ATT&CK","score":0.7699999809265137},{"id":"https://openalex.org/keywords/mqtt","display_name":"MQTT","score":0.49000000953674316},{"id":"https://openalex.org/keywords/constrained-application-protocol","display_name":"CoAP","score":0.9819999933242798}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6333000063896179},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5069000124931335},{"id":"https://openalex.org/C124978682","wikidata":"https://www.wikidata.org/wiki/Q1201019","display_name":"Proof of concept","level":2,"score":0.476500004529953},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.4521999955177307},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4293999969959259},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.31119999289512634},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.24940000474452972},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.24529999494552612},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.23600000143051147},{"id":"https://openalex.org/C61797465","wikidata":"https://www.wikidata.org/wiki/Q1188986","display_name":"Term (time)","level":2,"score":0.23229999840259552}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icaiset66439.2026.11541828","doi":"https://doi.org/10.1109/icaiset66439.2026.11541828","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icaiset66439.2026.11541828","pdf_url":null,"source":{"id":"https://openalex.org/S7407096233","display_name":"International Conference on Artificial Intelligence, Systems, and Emerging Technologies (ICAISET)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Conference on Artificial Intelligence, Systems, and Emerging Technologies (ICAISET)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2234639732","https://openalex.org/W2485229854","https://openalex.org/W4200579948","https://openalex.org/W4210392198","https://openalex.org/W4303627787","https://openalex.org/W4313343363","https://openalex.org/W4318164057","https://openalex.org/W4392364798","https://openalex.org/W4409339711","https://openalex.org/W4410206799","https://openalex.org/W7129240676"],"related_works":["https://openalex.org/W4408402295","https://openalex.org/W7123369830","https://openalex.org/W4404600696","https://openalex.org/W7136161994","https://openalex.org/W4415912848","https://openalex.org/W4318164057","https://openalex.org/W7162160699","https://openalex.org/W4392249230","https://openalex.org/W7222866130","https://openalex.org/W7117668816"],"abstract_inverted_index":{"Internet":[0],"of":[1],"Things":[2],"(IoT)":[3],"and":[4,17,59,71,78,93,116,154],"Cyber-Physical":[5],"Systems":[6],"(CPS)":[7],"typically":[8],"ship":[9],"with":[10,47],"little":[11],"onboard":[12],"security":[13,53,87],"monitoring,":[14],"leaving":[15],"reconnaissance":[16],"unauthorized":[18],"access":[19],"difficult":[20],"to":[21,50,96,137],"detect":[22],"(particularly":[23],"on":[24,37,56,82],"resource-constrained":[25],"edge":[26],"devices).":[27],"This":[28],"paper":[29],"presents":[30],"a":[31,109],"proof-of-concept,":[32],"edge-native":[33],"deception":[34,166],"framework":[35,120],"running":[36],"an":[38],"ESP32-S3":[39],"microcontroller.":[40],"The":[41,119],"system":[42],"pairs":[43],"low-interaction":[44],"service":[45],"emulation":[46],"embedded":[48,127],"honeytokens":[49],"produce":[51],"high-signal":[52],"telemetry.":[54],"Built":[55],"ESP-IDF,":[57],"FreeRTOS,":[58],"lwIP,":[60],"it":[61],"exposes":[62],"constrained":[63,173],"decoy":[64],"stubs":[65],"for":[66,101,172],"HTTP,":[67],"TCP":[68],"banner,":[69],"MQTT,":[70],"CoAP":[72],"services":[73],"while":[74],"managing":[75],"synthetic":[76],"credentials":[77],"protocol":[79],"artifacts":[80],"locally":[81],"the":[83,106],"device.":[84],"We":[85,104],"normalize":[86],"events":[88],"into":[89],"lightweight":[90],"JSON":[91],"payloads":[92],"map":[94],"them":[95],"relevant":[97],"MITRE":[98],"ATT&CK":[99],"tactics":[100],"downstream":[102],"correlation.":[103],"evaluated":[105],"prototype":[107],"in":[108],"controlled":[110],"Wi-Fi":[111],"testbed":[112],"across":[113],"reconnaissance,":[114],"service-interaction,":[115],"honeytoken-triggering":[117],"scenarios.":[118],"reliably":[121],"detected":[122],"these":[123],"activities":[124],"without":[125,176],"exceeding":[126],"resource":[128],"limits:":[129],"CPU":[130],"utilization":[131],"ranged":[132],"from":[133],"6%":[134],"at":[135,144],"baseline":[136,148],"25%":[138],"during":[139],"alert":[140,155],"transmission,":[141],"RAM":[142],"peaked":[143],"240":[145],"KB,":[146],"average":[147],"power":[149],"draw":[150],"was":[151],"102":[152],"mW,":[153],"latency":[156],"fell":[157],"between":[158],"150\u2013300":[159],"ms.":[160],"These":[161],"results":[162],"suggest":[163],"that":[164],"microcontroller-class":[165],"can":[167],"deliver":[168],"practical":[169],"early-warning":[170],"visibility":[171],"IoT":[174],"deployments":[175],"server-grade":[177],"hardware.":[178]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-06-03T00:00:00"}